OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Trend Micro OfficeScan 10.6 Administrator’s Guide
Security Risk Outbreaks
6-90
A security risk outbreak occurs when detections of virus/malware, spyware/grayware,
and shared folder sessions over a certain period of time exceed a certain threshold.
There are several ways to respond to and contain outbreaks in the network, including:
• Enabling OfficeScan to monitor the network for suspicious activity
• Blocking critical client computer ports and folders
• Sending outbreak alert messages to clients
• Cleaning up infected computers
Security Risk Outbreak Criteria and Notifications
Configure OfficeScan to send you and other OfficeScan administrators a notification
when the following events occur:
• Virus/Malware outbreak
• Spyware/Grayware outbreak
• Shared folder session outbreak
Define an outbreak by the number of detections and the detection period. An outbreak
is triggered when the number of detections within the detection period is exceeded.
OfficeScan comes with a set of default notification messages that inform you and other
OfficeScan administrators of an outbreak. You can modify the notifications and
configure additional notification settings to suit your requirements.
Note: OfficeScan can send security risk outbreak notifications through email, pager, SNMP
trap, and Windows NT Event logs. For shared folder session outbreaks, OfficeScan
sends notifications through email. Configure settings when OfficeScan sends
notifications through these channels. For details, see Administrator Notification Settings on
page 12-27.